Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
File:                     dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer (raw, json)
Hash identifier:          kg8Dmq7jjO5sNqku/aQ1oAcknsXxULBONgCGaOjCVd8=
Subject key identifier:   74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425215213472BDCD874032B05F739E37A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47455
                          IP: 185.144.252.0/22
                          IP: 2a07:4200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:52:13:47:2b:dc:d8:74:03:2b:05:f7:39:e3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7450810f13df8d9019f157c36fbd0f6db9862992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:96:df:ba:4e:a5:80:92:64:47:ee:a0:d1:
                    bf:d9:61:27:34:db:87:bf:38:bc:4f:04:70:08:19:
                    42:7b:49:a6:5c:c5:0f:94:ef:fa:f0:6d:45:46:9e:
                    7c:69:60:e4:e1:97:3c:47:c8:69:1a:24:0a:05:9f:
                    28:c6:2e:c0:10:59:ab:95:87:86:56:11:a9:2b:85:
                    e4:6a:fe:14:a5:c4:af:ac:f9:60:a3:f9:5f:7f:f8:
                    f6:9b:3d:b4:06:14:08:a0:80:2f:d1:17:ae:8e:a2:
                    1a:7b:de:a2:a3:07:00:80:28:3b:41:90:f1:17:24:
                    54:0b:4a:33:94:d8:3e:5d:85:c8:c7:a8:da:0b:f3:
                    ba:76:13:a7:ee:93:78:cf:07:5e:7c:1e:56:6f:ed:
                    c9:88:26:43:c8:7a:74:0a:4b:6c:a2:a3:19:78:57:
                    76:d1:c1:92:ca:64:7a:3d:bd:65:1f:a4:62:90:c1:
                    8e:4b:13:84:cb:1c:7e:b6:7b:33:0d:22:58:5d:59:
                    c4:00:b6:b4:cd:ab:24:15:76:93:35:9a:ca:85:0d:
                    4c:72:1f:b0:66:18:b2:d4:3c:49:bf:fc:4d:af:98:
                    f9:ca:dc:a8:26:e5:0e:21:3c:87:f5:df:a3:d7:30:
                    c5:b9:30:cf:2a:88:78:33:51:92:1a:0e:04:3f:80:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.252.0/22
                IPv6:
                  2a07:4200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47455

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:57:91:6c:ad:96:bd:8d:26:4b:db:f7:a8:20:97:ae:59:
         c7:8c:eb:0e:cc:81:7e:9f:39:a2:32:e1:8c:c3:96:b4:ba:13:
         0d:a7:df:7b:00:42:40:fb:64:c3:41:cc:99:42:ef:0b:3f:76:
         f9:35:ef:d6:d0:42:42:13:72:f1:00:74:f1:60:53:c3:0c:e7:
         ae:bc:c8:65:97:7e:19:9b:0e:a7:c9:5b:40:b3:e4:00:d2:8c:
         39:7b:de:c7:cf:b4:4d:37:03:1e:29:63:a2:58:cf:4e:cb:9b:
         c5:51:72:35:b0:ce:81:86:76:c1:d5:54:72:c5:51:76:68:dc:
         bf:ca:0b:ef:89:27:19:a5:32:8b:ee:b2:ea:72:f3:57:54:59:
         ed:a2:20:83:1b:ff:3d:34:50:89:c2:ad:dc:e6:43:af:8e:91:
         9a:8f:31:44:1d:bd:fc:1b:dd:ed:0d:0a:a9:cf:26:c7:da:5f:
         4b:a4:dc:3f:ae:97:39:75:91:03:23:07:81:a7:7e:a1:e5:fb:
         c6:51:83:f8:6f:16:05:81:66:be:a5:fb:33:1f:96:a6:67:11:
         ff:48:f5:1e:b3:da:4d:7c:b4:ae:08:9a:9f:5a:90:ac:7f:48:
         3d:37:ca:25:09:ff:53:5b:1b:69:5d:0f:48:4f:8d:c9:ee:bb:
         ca:c5:52:14
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlIVITRyvc2HQDKwX3OeN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDUwODEwZjEzZGY4ZDkwMTlmMTU3YzM2ZmJkMGY2ZGI5ODYyOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq2W37pOpYCSZEfuoNG/2WEnNNuH
vzi8TwRwCBlCe0mmXMUPlO/68G1FRp58aWDk4Zc8R8hpGiQKBZ8oxi7AEFmrlYeG
VhGpK4Xkav4UpcSvrPlgo/lff/j2mz20BhQIoIAv0ReujqIae96iowcAgCg7QZDx
FyRUC0ozlNg+XYXIx6jaC/O6dhOn7pN4zwdefB5Wb+3JiCZDyHp0CktsoqMZeFd2
0cGSymR6Pb1lH6RikMGOSxOEyxx+tnszDSJYXVnEALa0zaskFXaTNZrKhQ1Mch+w
Zhiy1DxJv/xNr5j5ytyoJuUOITyH9d+j1zDFuTDPKoh4M1GSGg4EP4BQKwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHRQgQ8T342QGfFXw2+9D225himSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzEzMzVk
Ni1iNGQ2LTRjODMtOGIwZS04ZjIxNWMwOWFlNzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMTMzNWQ2
LWI0ZDYtNGM4My04YjBlLThmMjE1YzA5YWU3Mi8xL2RGQ0JEeFBmalpBWjhWZkRi
NzBQYmJtR0taSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZD8MA0EAgACMAcDBQMqB0IAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC5XzANBgkqhkiG9w0BAQsFAAOCAQEAUntXkWytlr2N
Jkvb96ggl65Zx4zrDsyBfp85ojLhjMOWtLoTDaffewBCQPtkw0HMmULvCz92+TXv
1tBCQhNy8QB08WBTwwznrrzIZZd+GZsOp8lbQLPkANKMOXvex8+0TTcDHiljoljP
TsubxVFyNbDOgYZ2wdVUcsVRdmjcv8oL74knGaUyi+6y6nLzV1RZ7aIggxv/PTRQ
icKt3OZDr46Rmo8xRB29/Bvd7Q0Kqc8mx9pfS6TcP66XOXWRAyMHgad+oeX7xlGD
+G8WBYFmvqX7Mx+WpmcR/0j1HrPaTXy0rgian1qQrH9IPTfKJQn/U1sbaV0PSE+N
ye67ysVSFA==
-----END CERTIFICATE-----